System and method for processing network packet flows

• US 20060239273A1
• Filed: 06/23/2006
• Published: 10/26/2006
• Est. Priority Date: 07/02/2001
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: TippingPoint Technologies, Inc. (Open Text Corporation)
• Inventors: Willebeek-LeMair, Marc, Werner, Jon H., Smith, Brian C., Kolbly, Donovan M., Cox, Dennis J., Webster, Francis S. III, Buckman, Charles R., Blackard, Joe Wayne, Cantrell, Craig S.
• Granted Patent: US 7,633,868 B2
• Time in Patent Office: Days
• US Class Current: 370/395.410
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures

Abstract

A system and method provides a broadband network node for a best effort network such as the Internet or intranets which supports the inexpensive and rapid deployment of services to the best efforts network. Separate data path and control path mechanisms allow high-speed data transfers with parallel processing flows for the data path that are controlled across data flows by the control path. Packets are classified, modified and shaped to enable the service on the network with an accountant to track packet traffic for control and billing purposes. A series of processing blades perform a modification function for each blade that processes packets according to classifications. The processing blades are modular and scalable for insertion in the broad band switch to rapidly adapt the broadband network node for new services.

Claims

1-22. -22. (canceled)

23. A method for providing a service on a packet-based network, the method comprising:

monitoring network traffic with a processor to detect control protocol information;

extracting control protocol information from the network traffic;

using reflective programming to create a new dataflow program for monitoring packets associated with at least some of the extracted control protocol information; and

monitoring the network traffic with the new dataflow program.

24. The method of claim 23 wherein the processor comprises a network processor.

25. The method of claim 23 wherein monitoring network traffic further comprises:

monitoring network traffic with a processor running a dataflow program to detect control protocol information.

26. The method of claim 23 wherein monitoring network traffic comprises:

monitoring network traffic with a processor running a rules-based program to detect control protocol information.

27. The method of claim 23 wherein the control protocol information comprises host and port information from network traffic associated with an FTP data.

28. The method of claim 27 wherein the new dataflow program comprises a host/port quadruple associated with the FTP data.

29. The method of claim 27 wherein the new dataflow program associates the FTP data with a class of service.

30. The method of claim 23 wherein the control protocol information comprises DHCP requests and responses from network traffic associated with a dynamically assigned IP address.

31. The method of claim 30 wherein the new dataflow program comprises rules based on IP addresses extracted from MAC IP mapping.

32. The method of claim 23 wherein the control protocol information comprises DNS requests and responses from network traffic associated with mapping of an Internet host name and an IP address.

33. The method of claim 32 wherein the new dataflow program processes traffic associated with the Internet host name.

34. The method of claim 23 wherein the control protocol information comprises a lookup request to a first server for the IP address and port number of a second server having predetermined information.

35. The method of claim 34 wherein the new dataflow program comprises instructions to create another dataflow program.